Skip to content

Refactor activation permission helpers to remove parameter-overload lint violations#32713

Open
Copilot wants to merge 4 commits into
mainfrom
copilot/lint-remediation-workflow-compilation
Open

Refactor activation permission helpers to remove parameter-overload lint violations#32713
Copilot wants to merge 4 commits into
mainfrom
copilot/lint-remediation-workflow-compilation

Conversation

Copy link
Copy Markdown
Contributor

Copilot AI commented May 16, 2026

This issue targets lint-monster remediation in pkg/workflow/, where compilation code has excessive function sizes and overloaded signatures. This PR addresses the activation-permissions slice of that work by removing high-parameter helper signatures in the activation job permission path without changing behavior.

  • Activation permission API cleanup (options struct pattern)

    • Replaced overloaded helper signatures in compiler_activation_job.go with a typed options object:
      • addActivationInteractionPermissions
      • addActivationInteractionPermissionsMap
      • addBroadActivationInteractionPermissions
    • Introduced activationInteractionPermissionsOptions to carry reaction/status-comment scope inputs as one cohesive unit.
  • Callsite migration in compiler flow

    • Updated activation job builder callsites in compiler_activation_job_builder.go to construct and pass the options object.
    • Preserved existing permission derivation flow (normal trigger parsing, fallback path, centralized slash-command synthetic on handling).
  • Scoped test updates

    • Updated direct helper invocations in activation_permissions_scope_test.go to use the new options struct.
    • Kept existing permission assertions intact to maintain current behavior guarantees.
  • Naming consistency follow-up

    • Normalized options field names to use full terms (PullRequests, Discussions) for readability and consistency with existing naming conventions.
addActivationInteractionPermissionsMap(permsMap, activationInteractionPermissionsOptions{
	onSection:                     ctx.data.On,
	hasReaction:                   ctx.hasReaction,
	reactionIncludesIssues:        ctx.reactionIssues,
	reactionIncludesPullRequests:  ctx.reactionPullRequests,
	reactionIncludesDiscussions:   ctx.reactionDiscussions,
	hasStatusComment:              ctx.hasStatusComment,
	statusCommentIncludesIssues:   ctx.statusCommentIssues,
	statusCommentIncludesPullRequests: ctx.statusCommentPRs,
	statusCommentIncludesDiscussions:  ctx.statusCommentDiscussions,
})

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

  • https://api.github.com/graphql
    • Triggering command: /usr/bin/gh gh repo view --json owner,name --jq .owner.login + "/" + .name x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet env -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh repo view --json owner,name --jq .owner.login + "/" + .name 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linuorigin (http block)
    • Triggering command: /usr/bin/gh gh pr list --repo github/gh-aw --state all --author app/github-actions --search created:2026-05-11T23:58:00Z..2026-05-12T00:05:00Z --limit 1 --json number --jq .[0].number GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/vet (http block)
  • https://api.github.com/orgs/owner/actions/secrets
    • Triggering command: /usr/bin/gh gh api /orgs/owner/actions/secrets --jq .secrets[].name -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet env -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh api /orgs/owner/actions/secrets --jq .secrets[].name tWZ2/0OszbP7X4RhGOINSECURE gh 64/bin/go /repos/actions/ggo --jq ode_modules/.bin-json 6712262/b520/impGO111MODULE -c che/go-build/12/GOINSECURE gh 64/bin/go json' --ignore-pgit --jq /usr/bin/gh /opt/hostedtoolcconfig (http block)
    • Triggering command: /usr/bin/gh gh api /orgs/owner/actions/secrets --jq .secrets[].name echo "��� JSON fGOINSECURE gh 64/bin/go --ignore-path ..go ation permissionenv sv node /opt�� prettier --check 64/bin/go --ignore-path .prettierignore (http block)
  • https://api.github.com/orgs/test-owner/actions/secrets
    • Triggering command: /usr/bin/gh gh api /orgs/test-owner/actions/secrets --jq .secrets[].name -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet env -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh api /orgs/test-owner/actions/secrets --jq .secrets[].name "prettier" --wriGOINSECURE infocmp 64/bin/go /ref/tags/v9 ache/go/1.25.8/xenv odules/npm/node_-json prettier --ch�� **/*.cjs **/*.ts 64/bin/go --ignore-path ../../../.prettiinit de go (http block)
    • Triggering command: /usr/bin/gh gh api /orgs/test-owner/actions/secrets --jq .secrets[].name cd actions/setupGOINSECURE gh 64/bin/go w/js/**/*.json' /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/vet --jq sv sh -c "prettier" --cheGOSUMDB infocmp 64/bin/go kflow/compiler_agh go modules/@npmcli//repos/actions/github-script/git/ref/tags/v9.0.0 go (http block)
  • https://api.github.com/repos/actions/ai-inference/git/ref/tags/v1
    • Triggering command: /usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq [.object.sha, .object.type] | @tsv test1.md test2.lock.yml /usr/bin/gh -json GO111MODULE 64/bin/go gh api runs/20260516-215959-26563/test-467029981 --jq ache/node/24.14.1/x64/bin/node url GO111MODULE 64/bin/go /usr/lib/git-core/git (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet env ithub-script/git/ref/tags/v9 GO111MODULE bject.type] | @tsv GOINSECURE GOMOD GOMODCACHE git (http block)
  • https://api.github.com/repos/actions/checkout/git/ref/tags/v3
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq [.object.sha, .object.type] | @tsv -unreachable=false /tmp/go-build1396059263/b041/vet.cfg ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet GOSUMDB GOWORK 64/bin/go ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet -uns�� 5959-26563/test-825530369 /tmp/go-build1396059263/b094/vet.cfg e/git /tmp/go-build416infocmp -trimpath 64/bin/go e/git (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq [.object.sha, .object.type] | @tsv vaScript56139471remote.origin.url GO111MODULE ache/go/1.25.8/x64/bin/go GOINSECURE GOMOD GOMODCACHE go env Onlymin-integrity_only_defaults_repo83431042/001 GO111MODULE /opt/hostedtoolcache/go/1.25.8/x64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE 1/x64/bin/node GOINSECURE GOMOD GOMODCACHE go t-ha�� ithub/workflows/architecture-guardian.md GO111MODULE ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linu12346 (http block)
  • https://api.github.com/repos/actions/checkout/git/ref/tags/v5
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq [.object.sha, .object.type] | @tsv se 6059263/b257/vet.cfg .cfg GOINSECURE GOMOD GOMODCACHE ache/go/1.25.8/xconfig test�� -v -parallel=4 /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/vet -run=^Test ./... -short /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linu-test.v=true (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq [.object.sha, .object.type] | @tsv user.name Test User ache/node/24.14.1/x64/bin/node -json GO111MODULE 64/bin/go git-receive-pack t-36�� sistency_KeyOrdering1249986274/001/test2.md go /usr/bin/git -json GO111MODULE 64/bin/go git (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq [.object.sha, .object.type] | @tsv -bool (http block)
  • https://api.github.com/repos/actions/checkout/git/ref/tags/v6
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv ab-testing-advisor.md GO111MODULE ache/go/1.25.8/x64/pkg/tool/linu-importcfg GOINSECURE GOMOD GOMODCACHE ache/go/1.25.8/x--all -ato�� (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv agent-performance-analyzer.md efaultBranchFromLsRemoteWithRealGitbranch_with_hmain ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE ache/go/1.25.8/xowner/host-repo -o Onlymin-integrity_with_repos_array_c2718768426/001 -trimpath 6059263/b344/vet.cfg -p main -lang=go1.25 /opt/hostedtoolcache/go/1.25.8/xTest User (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv DefaultBranchFromLsRemoteWithRealGitbranch_with_hyphen567620608/001' DefaultBranchFromLsRemoteWithRealGitbranch_with_hyphen567620608/001' ache/go/1.25.8/x64/pkg/tool/linux_amd64/compile GOINSECURE GOMOD GOMODCACHE ache/go/1.25.8/xtest-owner/test-repo-26563 -o OnlyCompiledOutput3479323726/001 -trimpath ache/go/1.25.8/x64/pkg/tool/linux_amd64/compile -p github.com/githu-1 -lang=go1.25 ache/go/1.25.8/x64/pkg/tool/linutest@example.com (http block)
  • https://api.github.com/repos/actions/github-script/git/ref/tags/v8
    • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq [.object.sha, .object.type] | @tsv t0 go (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq [.object.sha, .object.type] | @tsv ry=1 (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq [.object.sha, .object.type] | @tsv runs/20260516-220456-45576/test-4272690644 -buildtags ache/node/24.14.1/x64/bin/node -errorsas -ifaceassert -nilfunc ache/node/24.14.1/x64/bin/node s-30�� ere -tests /usr/bin/git npx prettier --wgit x_amd64/compile 64/bin/go git (http block)
  • https://api.github.com/repos/actions/github-script/git/ref/tags/v9
    • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE QMlkECJ4SArB env -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
  • https://api.github.com/repos/actions/github-script/git/ref/tags/v9.0.0
    • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9.0.0 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9.0.0 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9.0.0 --jq [.object.sha, .object.type] | @tsv go1.25.8 -c=4 -nolocalimports -importcfg /tmp/go-build1396059263/b525/importcfg -pack /tmp/go-build1396059263/b525/_testmain.go env -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
  • https://api.github.com/repos/actions/setup-go/git/ref/tags/v4
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv eutil.test -buildtags ortcfg.link -errorsas -ifaceassert -nilfunc Ri5pqIbYMcUupt6Fbl/es83SkSH2yExAconfig -ato�� /ref/tags/v9 -buildtags sv l -ifaceassert -nilfunc /opt/hostedtoolc--jq (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv 0456-45576/test-1048308936 GO111MODULE xpires.lock.yml GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 4076420/b524/vet.cfg GOINSECURE GOMOD GOMODCACHE go (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE ache/node/24.14.1/x64/bin/node GOINSECURE GOMOD GOMODCACHE go t-18�� bility_SameInputSameOutput1684698020/001/stability-test.md GO111MODULE ache/node/24.14.1/x64/bin/node GOINSECURE GOMOD GOMODCACHE go (http block)
  • https://api.github.com/repos/actions/setup-node/git/ref/tags/v4
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv se 6059263/b074/vet.cfg 64/pkg/tool/linux_amd64/compile GOINSECURE FFiles,SFiles,Sw-test.testlogfile=/tmp/go-build1396059263/b562/testlog.txt GOMODCACHE 64/pkg/tool/linu-test.v=true GoFi�� 166016882 /tmp/go-build139-test.run=^Test ache/go/1.25.8/x-test.short=true GOSUMDB GOWORK 64/bin/go ache/go/1.25.8/x64/pkg/tool/linux_amd64/compile (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv g_.a }} {{context.Compiler}} 1/x64/bin/node -errorsas -ifaceassert -nilfunc ortcfg t-ha�� ithub/workflows/artifacts-summary.md g/styles/theme.go ache/node/24.14.1/x64/bin/node -errorsas -ifaceassert -nilfunc pAGQ9fFHqCk1k/GP4Smghqs6byKn_BLo--jq (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv sistency_GoAndJavaScript2062474639/001/test-inlined-imports-enab-p go o.git -json GO111MODULE 64/bin/go git t-33�� k/gh-aw/gh-aw/.github/workflows/ab-testing-advisor.md origin ache/node/24.14.1/x64/bin/node -json GO111MODULE 64/bin/go ache/node/24.14.1/x64/bin/node (http block)
  • https://api.github.com/repos/actions/setup-node/git/ref/tags/v6
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv ace-editor.md GO111MODULE ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE ache/go/1.25.8/xowner/repo -ato�� Onlymin-integrity_with_repos=public_4113097781/0-test.timeout=10m0s -buildtags 6059263/b332/vet.cfg -errorsas -ifaceassert -nilfunc /opt/hostedtoolcache/go/1.25.8/xtest@example.com (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE ache/go/1.25.8/x64/pkg/tool/linu-nolocalimports GOINSECURE GOMOD GOMODCACHE ache/go/1.25.8/xowner/test-repo (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv 6059263/b464/embedcfg GO111MODULE ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE ache/go/1.25.8/xowner/test-repo -o OnlyCompiledOutput3479323726/001 -trimpath 1/x64/bin/node -p main -lang=go1.25 /opt/hostedtoolcache/go/1.25.8/xremote.origin.url (http block)
  • https://api.github.com/repos/actions/upload-artifact/git/ref/tags/v4
    • Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE ache/go/1.25.8/xowner/test-repo -uns�� ApprovalLabelsCompiledOutput1739897605/001 /tmp/go-build1396059263/b005/vet.cfg ingutil.test GOSUMDB GOWORK 64/bin/go ingutil.test (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv vaScript561394716/001/test-empty-frontmatter.md GO111MODULE 1/x64/bin/node GOINSECURE GOMOD GOMODCACHE go t-ha�� ring2942948932/001/test2.md GO111MODULE ache/go/1.25.8/x64/pkg/tool/linux_amd64/asm GOINSECURE GOMOD GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linutest@example.com (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv nifest-legacy-1874010390/.github/workflows GO111MODULE .cfg GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linutest@example.com (http block)
  • https://api.github.com/repos/aws-actions/configure-aws-credentials/git/ref/tags/v4
    • Triggering command: /usr/bin/gh gh api /repos/aws-actions/configure-aws-credentials/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv bility_SameInputSameOutput2004616316/001/stability-test.md test@example.com (http block)
    • Triggering command: /usr/bin/gh gh api /repos/aws-actions/configure-aws-credentials/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv 6059263/b542/testutil.test -importcfg t -s -w -buildmode=exe xcsaoZxB8cXld/pu--package-lock-only /tmp�� ry=1 -extld=gcc 6059263/b542/_pkg_.a -json GO111MODULE x_amd64/vet git (http block)
    • Triggering command: /usr/bin/gh gh api /repos/aws-actions/configure-aws-credentials/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv licyTrustedUsersCompiledOutput506073110/001 GO111MODULE /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/vet url GOMOD GOMODCACHE /opt/hostedtoolcache/go/1.25.8/x--jq -ato�� -bool -buildtags /usr/bin/git -errorsas -ifaceassert layTitle /usr/bin/git (http block)
  • https://api.github.com/repos/azure/login/git/ref/tags/v2
    • Triggering command: /usr/bin/gh gh api /repos/azure/login/git/ref/tags/v2 --jq [.object.sha, .object.type] | @tsv runs/20260516-215959-26563/test-1747534471 -test.v=true kflows/test-no-expires.lock.yml -test.timeout=10node -test.run=^Test -test.short=trueinstall /opt/hostedtoolc--package-lock-only -ato�� -bool l t -errorsas -ifaceassert -nilfunc git (http block)
    • Triggering command: /usr/bin/gh gh api /repos/azure/login/git/ref/tags/v2 --jq [.object.sha, .object.type] | @tsv echo "��� All validations passed" GOPROXY (http block)
    • Triggering command: /usr/bin/gh gh api /repos/azure/login/git/ref/tags/v2 --jq [.object.sha, .object.type] | @tsv y -buildtags /opt/hostedtoolcache/node/24.14.1/x64/bin/node -errorsas -ifaceassert -nilfunc node /tmp�� /tmp/TestHashConsistency_GoAndJavaScript3624553126/001/test-frontmatter-with-env-template-expresgh -tests /usr/bin/gh npx prettier --w/usr/lib/git-core/git gh 64/bin/go gh (http block)
  • https://api.github.com/repos/docker/login-action/git/ref/tags/v3
    • Triggering command: /usr/bin/gh gh api /repos/docker/login-action/git/ref/tags/v3 --jq [.object.sha, .object.type] | @tsv runs/20260516-215959-26563/test-1747534471/.github/workflows -json=Name,ImportPath,Error,Dir,GoFiles,IgnoredGoFiles,IgnoredOtherFiles,CFiles,CgoFiles,CXXFileinit /bin/sh l GO111MODULE 64/bin/go /bin/sh -c git-receive-pack '/tmp/TestParseDefaultBranchFromLsRemoteWithRealGitbranch_with_hyphen567620608/gh l /usr/bin/git -json GO111MODULE 64/bin/go git (http block)
    • Triggering command: /usr/bin/gh gh api /repos/docker/login-action/git/ref/tags/v3 --jq [.object.sha, .object.type] | @tsv licyTrustedUsersRequiresMinIntegrity4180909444/001 GO111MODULE ache/node/24.14.1/x64/bin/node l GOMOD GOMODCACHE ache/node/24.14.--package-lock-only 7619�� hub.actor -test.v=true /usr/bin/gh -test.timeout=10git -test.run=^Test -test.short=true. gh (http block)
    • Triggering command: /usr/bin/gh gh api /repos/docker/login-action/git/ref/tags/v3 --jq [.object.sha, .object.type] | @tsv licyTrustedUsersExpressionCompiledOutput3840758386/001 -buildtags /usr/bin/git l -ifaceassert -nilfunc git -C /tmp/gh-aw-test-runs/20260516-220908-63533/test-add-source-path-2814762204 url /usr/bin/infocmp npx prettier --wgit gh 64/bin/go infocmp (http block)
  • https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v0.1.2
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v0.1.2 --jq [.object.sha, .object.type] | @tsv /ref/tags/v9 /tmp/go-build1396059263/b222/vetnonexistent-workflow-test-12345 r: $owner, name: $name) { hasDiscussionsEnabled } } -json GO111MODULE 64/bin/go /opt/hostedtoolcache/go/1.25.8/xremote.origin.url -uns�� 689798169/001 /tmp/go-build1396059263/b397/vet.cfg ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet url GO111MODULE 64/bin/go ache/go/1.25.8/x64/pkg/tool/linu--jq (http block)
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v0.1.2 --jq [.object.sha, .object.type] | @tsv 0456-45576/test-4035720645 GO111MODULE r: $owner, name: $name) { hasDiscussionsEnabled } } GOINSECURE GOMOD GOMODCACHE go env -json =my-default /opt/hostedtoolcache/go/1.25.8/x64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v0.1.2 --jq [.object.sha, .object.type] | @tsv 0908-63533/test-1226780852 GO111MODULE r: $owner, name: $name) { hasDiscussionsEnabled } } m0s GOMOD (http block)
  • https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v1.0.0
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv g/envutil/envutil.go g/envutil/envutil_test.go ache/go/1.25.8/x64/pkg/tool/linux_amd64/compile GOINSECURE GOMOD GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linuorigin -uns�� 6059263/b484/_pkg_.a /tmp/go-build1396059263/b063/vet.cfg ache/go/1.25.8/x64/bin/go GOSUMDB GOWORK 64/bin/go /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv E3YKmqOmh GO111MODULE tartedAt,updatedAt,event,headBranch,headSha,displayTitle GOINSECURE GOMOD GOMODCACHE ortcfg env /ref/tags/v9 GO111MODULE sv GOINSECURE GOMOD GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linuremote.origin.url (http block)
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE tartedAt,updatedAt,event,headBranch,headSha,displayTitle GOINSECURE GOMOD GOMODCACHE go env 0908-63533/test-remote.upstream.url GO111MODULE 1/x64/bin/node GOINSECURE GOMOD GOMODCACHE 1/x64/bin/node (http block)
  • https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v1.2.3
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE tartedAt,updatedAt,event,headBranch,headSha,displayTitle H_PREFIX_ARGS="--docker-host-path-prefix /tmp/gh-aw" fi echo "$GH_AW_DOCKER_HOST_PATH_PREFIX_AR GOMOD GOMODCACHE ache/go/1.25.8/xconfig -uns�� RequiresMinIntegremote.upstream.url /tmp/go-build1396059263/b061/vet.cfg 1/x64/bin/node GOSUMDB b/gh-aw/pkg/cons-1 64/bin/go ache/go/1.25.8/x64/pkg/tool/linux_amd64/compile (http block)
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv DefaultBranchFromLsRemoteWithRealGitmain_branch1939510022/001' DefaultBranchFromLsRemoteWithRealGitmain_branch1939510022/001' ache/go/1.25.8/x64/bin/go H_PREFIX_ARGS="--docker-host-path-prefix /tmp/gh-aw" fi echo "$GH_AW_DOCKER_HOST_PATH_PREFIX_AR GOMOD GOMODCACHE ortcfg env 0456-45576/test-remote.origin.url GO111MODULE ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE ache/go/1.25.8/x64/bin/go H_PREFIX_ARGS="--docker-host-path-prefix /tmp/gh-aw" fi echo "$GH_AW_DOCKER_HOST_PATH_PREFIX_AR GOMOD GOMODCACHE go env 0908-63533/test-remote.origin.url GO111MODULE 1/x64/bin/node GOINSECURE GOMOD GOMODCACHE 1/x64/bin/node (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs
    • Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --limit 100 --created >=2026-05-09 GOMOD GOMODCACHE 64/pkg/tool/linutest@example.com env 0596691/.github/workflows .cfg 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linu--auto (http block)
    • Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --limit 100 --created >=2026-04-16 GOMOD GOMODCACHE x_amd64/asm env -json .cfg 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linuTest User (http block)
    • Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --limit 100 --created >=2026-02-15 GOMOD GOMODCACHE 64/pkg/tool/linuremote.origin.url env -json .cfg 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/vet (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/1/artifacts
    • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/1/artifacts --jq .artifacts[].name GO111MODULE 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linurev-parse (http block)
    • Triggering command: /usr/bin/gh gh run download 1 --dir test-logs/run-1 .cfg 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linumyorg (http block)
    • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/1/artifacts --jq .artifacts[].name GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/12345/artifacts
    • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12345/artifacts --jq .artifacts[].name LsRemoteWithRealGitmain_branch22main 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linutest@example.com (http block)
    • Triggering command: /usr/bin/gh gh run download 12345 --dir test-logs/run-12345 GO111MODULE 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linustatus (http block)
    • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12345/artifacts --jq .artifacts[].name GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/1234567890
    • Triggering command: /usr/bin/gh gh api repos/{owner}/{repo}/actions/runs/1234567890 --jq {databaseId: .id, number: .run_number, url: .html_url, status: .status, conclusion: .conclusion, workflowName: .name, workflowPath: .path, createdAt: .created_at, startedAt: .run_started_at, updatedAt: .updated_at, event: .event, headBranch: .head_branch, -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet env -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh api repos/{owner}/{repo}/actions/runs/1234567890 --jq {databaseId: .id, number: .run_number, url: .html_url, status: .status, conclusion: .conclusion, workflowName: .name, workflowPath: .path, createdAt: .created_at, startedAt: .run_started_at, updatedAt: .updated_at, event: .event, headBranch: .head_branch, run lint:cjs 64/bin/go xterm-color /opt/hostedtoolc-atomic (http block)
    • Triggering command: /usr/bin/gh gh api repos/{owner}/{repo}/actions/runs/1234567890 --jq {databaseId: .id, number: .run_number, url: .html_url, status: .status, conclusion: .conclusion, workflowName: .name, workflowPath: .path, createdAt: .created_at, startedAt: .run_started_at, updatedAt: .updated_at, event: .event, headBranch: .head_branch, npx prettier --cGOINSECURE infocmp 64/bin/go ignore-path .././usr/sbin/phpquery T_PATH_PREFIX_A run-script/lib/nGOPATH node /hom�� --check scripts/**/*.js 64/bin/go -d --jq modules/@npmcli//tmp/gh-aw-add-gitattributes-test3462352768 go (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/12346/artifacts
    • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12346/artifacts --jq .artifacts[].name .cfg 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linustatus (http block)
    • Triggering command: /usr/bin/gh gh run download 12346 --dir test-logs/run-12346 GO111MODULE 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE hqTyUHF/Xdet3WTErev-parse (http block)
    • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12346/artifacts --jq .artifacts[].name GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go itbr�� -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/2/artifacts
    • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/2/artifacts --jq .artifacts[].name GO111MODULE 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh run download 2 --dir test-logs/run-2 .cfg 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linuother (http block)
    • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/2/artifacts --jq .artifacts[].name GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/3/artifacts
    • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/3/artifacts --jq .artifacts[].name .cfg 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh run download 3 --dir test-logs/run-3 GO111MODULE 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/3/artifacts --jq .artifacts[].name GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env 6/001/test-inlin.github/workflows/test.md GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/4/artifacts
    • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/4/artifacts --jq .artifacts[].name GO111MODULE 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linustatus (http block)
    • Triggering command: /usr/bin/gh gh run download 4 --dir test-logs/run-4 GO111MODULE 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linuremote.origin.url (http block)
    • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/4/artifacts --jq .artifacts[].name GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env 6/001/test-inlin--detach GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/5/artifacts
    • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/5/artifacts --jq .artifacts[].name GO111MODULE 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/vet env 2327122404/.github/workflows GO111MODULE x_amd64/link GOINSECURE GOMOD GOMODCACHE x_amd64/link (http block)
    • Triggering command: /usr/bin/gh gh run download 5 --dir test-logs/run-5 LsRemoteWithRealGitcustom_branch1377719875/001' 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linuother env y_with_explicit_repo81215066/001 .cfg .cfg GOINSECURE GOMOD GOMODCACHE ache/go/1.25.8/xTest User (http block)
    • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/5/artifacts --jq .artifacts[].name GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
  • https://api.github.com/repos/github/gh-aw/actions/workflows
    • Triggering command: /usr/bin/gh gh workflow list --json name,state,path -c=4 -nolocalimports -importcfg /tmp/go-build3913964440/b001/importcfg -pack /tmp/testenv-3965212576/main.go x_amd64/vet env -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 100 /tmp/go-build1396059263/b540/importcfg -pack /tmp/go-build1396059263/b540/_testmain.go env -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 6 GOMOD GOMODCACHE 64/pkg/tool/linu/tmp/go-build1396059263/b546/_testmain.go (http block)
  • https://api.github.com/repos/github/gh-aw/contents/.github/workflows/shared/reporting.md
    • Triggering command: /tmp/go-build1396059263/b470/cli.test /tmp/go-build1396059263/b470/cli.test -test.testlogfile=/tmp/go-build1396059263/b470/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
    • Triggering command: /tmp/go-build2874076420/b470/cli.test /tmp/go-build2874076420/b470/cli.test -test.testlogfile=/tmp/go-build2874076420/b470/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true h ../../../.pretgo 64/pkg/tool/linuenv /sh sh -c npx prettier --wGOINSECURE x_amd64/compile 64/bin/go js/**/*.json' --go ache/go/1.25.8/xenv run-script/lib/n-json sh (http block)
    • Triggering command: /tmp/go-build3390232137/b470/cli.test /tmp/go-build3390232137/b470/cli.test -test.testlogfile=/tmp/go-build3390232137/b470/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true **/*.json --ignore-path ../../../.pretti-json sh -c 88YK/KOB8c-vu_1aGOINSECURE infocmp 64/bin/go re --log-level=ego go /prettier 0133549/b515/impGO111MODULE (http block)
  • https://api.github.com/repos/github/gh-aw/git/ref/tags/v0.47.4
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v0.47.4 --jq [.object.sha, .object.type] | @tsv ithub-script/git/ref/tags/v9.0.0 --log-level ache/node/24.14.1/x64/bin/node --log-target journal-or-kmsg 64/bin/go git t-11�� k/gh-aw/gh-aw/.github/workflows/archie.md config /opt/hostedtoolcache/node/24.14.1/x64/bin/node remote.upstream.infocmp GO111MODULE x_amd64/vet node (http block)
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v0.47.4 --jq [.object.sha, .object.type] | @tsv runs/20260516-220456-45576/test-4035720645/.github/workflows GOPROXY /usr/bin/git url GOWORK 64/bin/go git ls-r�� --symref origin /usr/bin/infocmp dBIp/mzu3STGRWMJinfocmp --write 64/bin/go infocmp (http block)
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v0.47.4 --jq [.object.sha, .object.type] | @tsv /tmp/go-build3390232137/b521/parser.test -importcfg /usr/bin/git -s -w -buildmode=exe git clon�� /tmp/TestParseDefaultBranchFromLsRemoteWithRealGitcustom_branch2080696981/001 l /usr/bin/git d gh 64/bin/go git (http block)
  • https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.0.0
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE x_amd64/link GOINSECURE GOMOD GOMODCACHE x_amd64/link (http block)
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linu--jq env -json GO111MODULE ache/go/1.25.8/x64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv 3269344091/.github/workflows GO111MODULE 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linu--jq env 779947735 GO111MODULE ache/go/1.25.8/x64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
  • https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.2.3
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet env -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv iant-3701692736/.github/workflows GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
  • https://api.github.com/repos/github/gh-aw/git/ref/tags/v2.0.0
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet env -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile (http block)
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet env -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq [.object.sha, .object.type] | @tsv iant-3701692736 GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
  • https://api.github.com/repos/github/gh-aw/git/ref/tags/v3.0.0
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v3.0.0 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE x_amd64/vet GOINSECURE nYfXbc2/b_x9gbCFconfig GOMODCACHE x_amd64/vet env -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v3.0.0 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v3.0.0 --jq [.object.sha, .object.type] | @tsv iant-227233871/.github/workflows GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go phen�� -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
  • https://api.github.com/repos/github/gh-aw/issues/17
    • Triggering command: /usr/bin/gh gh api repos/github/gh-aw/issues/17 go env -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet env -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh api repos/github/gh-aw/issues/17 -tests /tmp/go-build2874076420/b564/vet.cfg ith-tools.md actions/setup/jsGOMOD 64/bin/go cmd/gh-aw/capita/opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/vet cmd/gh-aw/comman-V=full cmd/gh-aw/formatGOPATH sh -c "prettier" --cheGOSUMDB cmd/gh-aw/main_hGOWORK 64/bin/go cmd/gh-aw/versioinfocmp cmd/linters/main-1 internal/tools/axterm-color go (http block)
    • Triggering command: /usr/bin/gh gh api repos/github/gh-aw/issues/17 sh -c h2697758629/001' h2697758629/001' 64/bin/go ignore-path .././opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/link go (http block)
  • https://api.github.com/repos/google-github-actions/auth/git/ref/tags/v2
    • Triggering command: /usr/bin/gh gh api /repos/google-github-actions/auth/git/ref/tags/v2 --jq [.object.sha, .object.type] | @tsv /tmp/gh-aw-test-runs/20260516-215959-26563/test-add-source-path--p show (http block)
    • Triggering command: /usr/bin/gh gh api /repos/google-github-actions/auth/git/ref/tags/v2 --jq [.object.sha, .object.type] | @tsv licyTrustedUsersExpressionCompiledOutput4037613861/001 GO111MODULE .cfg url GOMOD GOMODCACHE /opt/hostedtoolc--package-lock-only -ato�� /ref/tags/v9.0.0 -buildtags ps -errorsas -ifaceassert -nilfunc ps (http block)
    • Triggering command: /usr/bin/gh gh api /repos/google-github-actions/auth/git/ref/tags/v2 --jq [.object.sha, .object.type] | @tsv licyTrustedUsersCompiledOutput294625285/001 -importcfg /usr/bin/git l -w -buildmode=exe git conf�� /ref/tags/v9.0.0 l ps run format:pkg-json 64/bin/go ps (http block)
  • https://api.github.com/repos/nonexistent/action/git/ref/tags/v999.999.999
    • Triggering command: /usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq [.object.sha, .object.type] | @tsv 39/001/test-simple-frontmatter.md 6059263/b127/vet.cfg $name) { hasDiscussionsEnabled } } GOINSECURE GOMOD GOMODCACHE LhWRsuUC8q6r9JP0remote.origin.url (http block)
    • Triggering command: /usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq [.object.sha, .object.type] | @tsv ace-editor.md GO111MODULE 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/vet env 1933033404 GO111MODULE k GOINSECURE GOMOD GOMODCACHE go (http block)
    • Triggering command: /usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq [.object.sha, .object.type] | @tsv 3269344091/.github/workflows GO111MODULE 64/pkg/tool/linux_amd64/link GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/link env 779947735 GO111MODULE ortcfg.link GOINSECURE GOMOD GOMODCACHE 1ylhNC6nbiSnsJSv^remote\..*\.gh-resolved$ (http block)
  • https://api.github.com/repos/nonexistent/repo/actions/runs/12345
    • Triggering command: /usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion GOINSECURE GOMOD GOMODCACHE 5O/uj0Jsxk1t5AfUremote.origin.url estl�� .test 6059263/b123/vet.cfg x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion GOINSECURE GOMOD GOMODCACHE go env 399534052/.github/workflows GO111MODULE 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linuremote.origin.url (http block)
    • Triggering command: /usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion GOINSECURE GOMOD GOMODCACHE go env 1362434331/.github/workflows GO111MODULE ache/go/1.25.8/x64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
  • https://api.github.com/repos/org/repo/pulls/1
    • Triggering command: /usr/bin/gh gh api repos/org/repo/pulls/1 go env -json CgoFiles,CXXFiles,MFiles,HFiles,FFiles,SFiles,SwigFiles,SwigCXXFiles,SysoFiles,TestGoFiles,XTestGoFiles,CompiledGoFiles,Export,DepOnly,Imports,ImportMap,TestImports,XTestImpor x_amd64/vet GOINSECURE estGoFiles,XTestGoFiles,CompiledGoFiles,Export,DepOnly,Imports,ImportMap,TestImports�� GOMODCACHE x_amd64/vet env -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh api repos/org/repo/pulls/1 node /hom�� --write ../../../**/*.jsGOMOD 64/bin/go --ignore-path ../../../.prettienv (http block)
    • Triggering command: /usr/bin/gh gh api repos/org/repo/pulls/1 sh -c npx prettier --cGOINSECURE infocmp 64/bin/go ignore-path .././opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/vet TOKEN"; }; f sto-atomic in/dist/autofind-bool node /hom�� --check scripts/**/*.js 64/bin/go -d --jq /usr/bin/git go (http block)
  • https://api.github.com/repos/owner/repo/actions/secrets
    • Triggering command: /usr/bin/gh gh api /repos/owner/repo/actions/secrets --jq .secrets[].name ted/golang/pkg/f-errorsas (http block)
    • Triggering command: /usr/bin/gh gh api /repos/owner/repo/actions/secrets --jq .secrets[].name qHpJ/3YRs_sHtmcYGOINSECURE infocmp 64/bin/go /ref/tags/v9 ache/go/1.25.8/xenv sv 6712262/b513/impGO111MODULE -c che/go-build/f5/GOINSECURE infocmp 64/bin/go /ref/tags/v9 es.test sv /opt/hostedtoolcTest User (http block)
    • Triggering command: /usr/bin/gh gh api /repos/owner/repo/actions/secrets --jq .secrets[].name ays.md ../../../**/*.jsGOMOD 64/bin/go --ignore-path ../../../.prettienv (http block)
  • https://api.github.com/repos/owner/repo/actions/workflows
    • Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet env -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-remote-workflow --limit 30 --repo owner/repo 64/pkg/tool/linufeature-branch (http block)
    • Triggering command: /usr/bin/gh gh workflow list --repo owner/repo --json name,path,state x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile (http block)
  • https://api.github.com/repos/test-owner/test-repo/actions/secrets
    • Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet env -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name BID5/o3_qw07-sSeGOINSECURE (http block)
    • Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name led-with-env-template-expressions-in-body.md actions/setup/jsGOMOD 64/bin/go cmd/gh-aw/capita/opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/compile cmd/gh-aw/comman-V=full cmd/gh-aw/formatGOPATH sh -c "prettier" --cheGOSUMDB cmd/gh-aw/main_hGOWORK 64/bin/go cmd/gh-aw/versiogit cmd/linters/main-C internal/tools/a/tmp/gh-aw-test-runs/20260516-220908-63533/test-source-field-variant-1036741536/.github/workflows go (http block)
  • https://api.github.com/repos/test/repo
    • Triggering command: /usr/bin/gh gh api /repos/test/repo --jq .default_branch g_.a 6059263/b064/vet.cfg 64/pkg/tool/linux_amd64/link GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/link (http block)
    • Triggering command: /usr/bin/gh gh api /repos/test/repo --jq .default_branch 2757431119/.github/workflows GO111MODULE 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linuremote.origin.url env -json GO111MODULE ache/go/1.25.8/x64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
    • Triggering command: /usr/bin/gh gh api /repos/test/repo --jq .default_branch -json GO111MODULE ache/go/1.25.8/x64/bin/go GOINSECURE GOMOD GOMODCACHE go env (.*\)$/\2/p GO111MODULE k GOINSECURE GOMOD GOMODCACHE go (http block)

If you need me to access, download, or install something from one of these locations, you can either:


pr-sous-chef: branch refresh requested in https://github.com/github/gh-aw/actions/runs/25975883485

Generated by 👨‍🍳 PR Sous Chef ·

Copilot AI changed the title [WIP] Refactor workflow compilation engine to resolve lint issues Refactor activation permission helpers to remove parameter-overload lint violations May 16, 2026
Copilot AI requested a review from gh-aw-bot May 16, 2026 22:11
@pelikhan pelikhan marked this pull request as ready for review May 16, 2026 22:29
Copilot AI review requested due to automatic review settings May 16, 2026 22:29
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Refactors activation interaction permission helper APIs in pkg/workflow/ to remove high-parameter helper signatures by introducing a typed options struct, and migrates relevant callsites/tests to the new pattern.

Changes:

  • Replaced overloaded activation-permission helper function parameters with activationInteractionPermissionsOptions.
  • Updated activation job builder callsites to construct/pass the options struct.
  • Updated activation permission scope unit tests to use the new helper signature.
Show a summary per file
File Description
pkg/workflow/compiler_activation_job.go Introduces activationInteractionPermissionsOptions and refactors permission helper functions to accept it.
pkg/workflow/compiler_activation_job_builder.go Migrates activation permission helper callsites to pass the options struct.
pkg/workflow/activation_permissions_scope_test.go Updates direct helper invocations in tests to use the new options struct.

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comments suppressed due to low confidence (1)

pkg/workflow/compiler_activation_job.go:185

  • options.statusCommentIncludesDiscussions is applied even when options.hasStatusComment is false in the broad-fallback path, which can grant discussions: write unexpectedly (defaults for the include flag are true). Consider gating the status-comment portion of this condition on options.hasStatusComment to keep behavior consistent with the parsed-on-section path.
	if (options.hasReaction && options.reactionIncludesDiscussions) || options.statusCommentIncludesDiscussions {
		permsMap[PermissionDiscussions] = PermissionWrite
  • Files reviewed: 3/3 changed files
  • Comments generated: 1

Comment on lines +176 to 179
needsIssuesWriteForReaction := options.hasReaction && (options.reactionIncludesIssues || options.reactionIncludesPullRequests)
needsIssuesWriteForStatusComment := options.statusCommentIncludesIssues || options.statusCommentIncludesPullRequests
if needsIssuesWriteForReaction || needsIssuesWriteForStatusComment {
permsMap[PermissionIssues] = PermissionWrite
@github-actions github-actions Bot mentioned this pull request May 16, 2026
Copy link
Copy Markdown
Contributor

@github-actions github-actions Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Skills-Based Review 🧠

Applied /improve-codebase-architecture and /zoom-out — this is a refactor PR restructuring internal function signatures.

Key Themes

  • Repeated struct construction (inline comment): The options struct is manually assembled from activationJobBuildContext fields in three identical call sites. A ctx.interactionPermissionsOptions(onSection) helper method would concentrate the mapping in one place and make future field additions a one-line change.
  • Vocabulary mismatch (inline comment): activationJobBuildContext uses abbreviated field names (statusCommentPRs, reactionIssues) while activationInteractionPermissionsOptions uses fully-qualified names. The mismatch isn't a bug but adds a small cognitive tax at every mapping site.

Positive Highlights

  • ✅ The options struct pattern is the right call here — 8 positional booleans were impossible to read correctly without the now-removed /* hasReaction */ comments.
  • ✅ The refactor is purely mechanical with no behavioral change, and the existing tests faithfully cover the new call syntax.
  • ✅ Clean, consistent migration across all three call sites.

Verdict

Approving — this is a clear improvement. The two suggestions above are follow-on deepening opportunities rather than blockers.

🧠 Reviewed using Matt Pocock's skills by Matt Pocock Skills Reviewer · ● 5.3M

@github-actions
Copy link
Copy Markdown
Contributor

🧪 Test Quality Sentinel Report

Test Quality Score: 95/100

Excellent test quality

Metric Value
New/modified tests analyzed 17
✅ Design tests (behavioral contracts) 17 (100%)
⚠️ Implementation tests (low value) 0 (0%)
Tests with error/edge cases 15 (88%)
Duplicate test clusters 0
Test inflation detected No (ratio: 0.81×)
🚨 Coding-guideline violations None

Test Classification Details

View all 17 test classifications
Test File Classification Notes
TestActivationPermissionsIssueOnlyReactionAndStatusComment activation_permissions_scope_test.go:17 ✅ Design Verifies issues:write granted, pull-requests/discussions:write absent
TestActivationPermissionsPRReviewReactionOnly :50 ✅ Design Verifies pull-requests:write for PR review comment reactions; negatives confirmed
TestActivationPermissionsPullRequestReactionRequiresPullRequestsWrite :81 ✅ Design Both issues:write and pull-requests:write required for pull_request reactions
TestActivationPermissionsReactionPullRequestsDisabled :112 ✅ Design Edge case: reaction.pull-requests:false excludes PR write perms
TestActivationPermissionsStatusCommentDiscussionsDisabled :150 ✅ Design Edge case: status-comment.discussions:false excludes discussions:write
TestAddActivationInteractionPermissionsMapFallsBackOnInvalidOnYAML :185 ✅ Design Error path: invalid YAML triggers safe fallback with full write perms
TestAddActivationInteractionPermissionsMapFallbackRespectsStatusCommentDiscussionsToggle :205 ✅ Design Toggle edge case: discussions flag off suppresses discussions:write
TestActivationPermissionsStatusCommentIssuesDisabled :227 ✅ Design Edge case: status-comment.issues:false drops issues/PR write perms
TestAddActivationInteractionPermissionsMapFallbackRespectsStatusCommentIssuesToggle :264 ✅ Design Toggle edge case: issues off, discussions on → correct selective perms
TestStatusCommentObjectRejectsAllTargetsDisabled :286 ✅ Design Error path: all targets disabled → compilation error with descriptive message
TestActivationPermissionsStatusCommentPullRequestsDisabled :312 ✅ Design Edge case: pull-requests:false drops PR write perm
TestAddActivationInteractionPermissionsMapFallbackRespectsStatusCommentPullRequestsToggle :348 ✅ Design Toggle edge case: PR off, discussions on → correct selective perms
TestActivationPermissionsIssueCommentReactionRequiresPullRequestsWrite :374 ✅ Design Contract: issue_comment event for PRs requires pull-requests:write
TestActivationPermissionsCentralizedSlashCommandIssueCommentReaction :401 ✅ Design E2E: centralized slash_command grants correct multi-scope perms
TestActivationPermissionsCentralizedSlashCommandDiscussionOnlyReaction :439 ✅ Design E2E: discussion-only slash_command gets discussions:write only
TestActivationPermissionsCentralizedSlashCommandNoReactionNoPermissions :477 ✅ Design Security: no reaction/status-comment → no unexpected write perms
TestActivationPermissionsSlashCommandPRCommentReactionRequiresPullRequestsWrite :515 ✅ Design E2E: slash_command pull_request_comment → pull-requests:write

Flagged Tests — Requires Review

None. All 17 tests enforce clear behavioral contracts.


Language Support

Tests analyzed:

  • 🐹 Go (*_test.go): 17 tests — unit (//go:build !integration)

Verdict

Check passed. 0% of new/modified tests are implementation tests (threshold: 30%). All 17 tests verify observable behavioral contracts of the activation permissions compiler — specifically, which GitHub Actions permission scopes appear in the compiled lock file given different workflow frontmatter configurations. The test suite covers happy paths, negative/exclusion cases, error paths (all-disabled validation), invalid YAML fallback, and end-to-end centralized slash_command scenarios.


📖 Understanding Test Classifications

Design Tests (High Value) verify what the system does:

  • Assert on observable outputs, return values, or state changes
  • Cover error paths and boundary conditions
  • Would catch a behavioral regression if deleted
  • Remain valid even after internal refactoring

Implementation Tests (Low Value) verify how the system does it:

  • Assert on internal function calls (mocking internals)
  • Only test the happy path with typical inputs
  • Break during legitimate refactoring even when behavior is correct
  • Give false assurance: they pass even when the system is wrong

Goal: Shift toward tests that describe the system's behavioral contract — the promises it makes to its users and collaborators.

🧪 Test quality analysis by Test Quality Sentinel · ● 8.3M ·

@github-actions
Copy link
Copy Markdown
Contributor

Please refresh the branch and rerun checks after the latest fixes.

Generated by 👨‍🍳 PR Sous Chef ·

@github-actions
Copy link
Copy Markdown
Contributor

@copilot review all comments

Please address the unresolved review feedback, then push an updated branch.

Generated by 👨‍🍳 PR Sous Chef ·

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[lint-monster] Lint Remediation: Workflow Compilation (Group 3/3)

3 participants